8753 matches found
CVE-2018-0444 Cisco Packaged Contact Center Enterprise Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the...
CVE-2018-15434 Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...
CVE-2018-0444 Cisco Packaged Contact Center Enterprise Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the...
PT-2018-13017
Name of the Vulnerable Software and Affected Versions Cisco UCS Director affected versions not specified Description A stored cross-site scripting XSS attack could be conducted by an unauthenticated, remote attacker against a user of the web-based management interface. The issue arises from...
PT-2018-13027
Name of the Vulnerable Software and Affected Versions Cisco Unity Connection versions affected versions not specified Description A stored cross-site scripting XSS attack could be conducted by an authenticated, remote attacker against a user of the web-based interface. The issue arises from...
PT-2018-8837
Name of the Vulnerable Software and Affected Versions Cisco Tetration Analytics affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the...
CVE-2018-0465: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Small Business 300 Series Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerability exists because the affect...
PT-2018-8832
Name of the Vulnerable Software and Affected Versions Cisco Packaged Contact Center Enterprise affected versions not specified Description A stored XSS attack could be conducted by an unauthenticated, remote attacker against a user of the web-based management interface. This issue arises from...
PT-2018-13012
Name of the Vulnerable Software and Affected Versions Cisco Cloud Services Platform 2100 affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduc...
Cisco UCS Director Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient...
PT-2018-2140
Name of the Vulnerable Software and Affected Versions Cisco Unified IP Phone 7900 Series affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...
Microsoft Office SharePoint CVE-2018-8426 Cross Site Scripting Vulnerability
Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
WESEEK GROWI cross-site scripting vulnerability (CNVD-2018-18607)
WESEEK GROWI is an open source team collaboration software developed by WESEEK Japan. The software features asset management, quick search and member management. A cross-site scripting vulnerability exists in WESEEK GROWI 3.1.11 and earlier versions, which can be exploited by remote attackers to...
Infoblox NetMRI 7.1.1 Reflected XSS Vulnerability
Infoblox NetMRI is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cross site scripting
Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module PG Multi-Payment Service for EC-CUBE EC-CUBE Payment Module 2.12 version 3.5.23 and earlier, EC-CUBE Payment Module 2.11 version 2.3.17 and earlier, GMO-PG Payment Module PG Multi-Payment Service 2.12 version...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 discription or 2 comments field, related to users/userAddContent...
CVE-2018-16622
Multiple cross-site scripting XSS vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 discription or 2 comments field, related to users/userAddContent...
@bndynet/bbootstrap (>=1.0.2, <=2.2.1), @bndynet/jslib (>=1.0.52, <=2.0.0) +8 more potentially affected by CVE-2018-16330 via editor.md (1.5.0)
editor.md NPM version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on editor.md and may be impacted: - @bndynet/bbootstrap =1.0.2, =1.0.52, =2.3.6, =1.0.0, =0.2.0, =0.1.1, =0.1.0, =1.0.0, =1.0.3 Source cves: CVE-2018-16330 Source advisory:...
Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...